sos.mobiliar.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 48:d7:32:76:b4:40:29:c6:da:4e:06:c4:1a:79:6e:97:88:ae:39:4a was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sos.mobiliar.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 48:d7:32:76:b4:40:29:c6:da:4e:06:c4:1a:79:6e:97:88:ae:39:4a
Serial Number (int): 415846391724210607977050632443641827795162511690
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 7e:ff:a1:cf:a6:38:9d:9f:45:ee:f7:54:ca:06:28:e4:1b:df:c0:b9
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 27:88:93:7f:bf:4c:c4:74:22:da:ce:d7:c5:6f:f1:09:26:fa:7e:37
Fingerprint (sha256): 06:52:cf:ba:3f:db:2d:6f:31:e0:d9:5d:99:a4:23:72:87:b6:c8:a5:e5:4c:00:cb:69:a0:96:dc:8c:b9:02:c9

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate sos.mobiliar.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sos.mobiliar.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sos.mobiliar.ch

Other certificates including the domain name mobiliar.ch

(limited to 100 certificates)
standortcheck.mobiliar.ch
vpn.mobiliar.ch
gp-devsec.mobiliar.ch
cloud.campaign.mobiliar.ch
gp-ext.mobiliar.ch
securemail.mobiliar.ch
m24pp.mobiliar.ch
client-auto-i-dat.mobiliar.ch
vorsorge.mobiliar.ch
leonteq.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
leonteq.mobiliar.ch
marke.mobiliar.ch
gp-portal.mobiliar.ch
gp-gw-prod.mobiliar.ch
video.mobiliar.ch
*.content.mobiliar.ch
meteo-alarm.mobi.ch
gp-gw-dev.mobiliar.ch
tinelstest.mobiliar.ch
sos.mobiliar.ch
test.mobiliar.ch
gp-prod.mobiliar.ch
strategiemap.mobiliar.ch
raiffeisen.mobiliar.ch
gp-gw-dev.mobiliar.ch
mobiliar.ch
trainingnet-compliance.mobiliar.ch
api.training.cyber.mobiliar.ch
staging-video.mobiliar.ch
gp-prelogon.mobiliar.ch
test500.apps.mobiliar.ch
marke.mobiliar.ch
click.campaign.mobiliar.ch
newsletter-cdn.mobiliar.ch
selfservice.mobiliar.ch
secure.mobi.ch
gp-userid.mobiliar.ch
meinauto.mobiliar.ch
handwerker.mobiliar.ch
jobs.mobiliar.ch
selfservice.mobiliar.ch
gp-userid.mobiliar.ch
luawext.mobiliar.ch
strategiemap.mobiliar.ch
url4870.mobiliar.ch
resources.mobiliar.ch
gp-gw-dev.mobiliar.ch
selfservice.mobiliar.ch
newsletter.mobiliar.ch
ucc.mobi.ch
gp-testzertifikat.mobiliar.ch
*.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
mobiliar.ch
*.mobiliar.ch
kunst.mobiliar.ch
my.mobiliar.ch
fancystuff.mobiliar.ch
msghub.mobiliar.ch
mp.mobi.ch
cyber-training.mobiliar.ch
eshop.mobiliar.ch
test.mobiliar.ch
client-comparis.mobiliar.ch
b2capi1.mobiliar.ch
tinelstest.mobiliar.ch
www.handwerker.mobiliar.ch
check.mobiliar.ch
cyber-training.mobiliar.ch
b2capi.mobiliar.ch
liip-lead-client.mobiliar.ch
pssp-admin.mobiliar.ch
test.mobiliar.ch
vorsorge-mobiliar.ch
b2capi.mobiliar.ch
tymodenengelsman.com
vorsorge.mobiliar.ch
fileshare.mobiliar.ch
msghub.mobiliar.ch
meinauto-client.mobiliar.ch
smide.mobiliar.ch
gp-userid.mobiliar.ch
elm.mobiliar.ch
kunst.mobiliar.ch
igb2b.mobiliar.ch
b2eapi1.mobiliar.ch
eshop.mobiliar.ch
b2bapi2.mobiliar.ch
sign.mobiliar.ch
vorsorge.mobiliar.ch
viq.mobiliar.ch
jobs.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
b2capi.mobiliar.ch
awareness.mobiliar.ch
z101392.mobiliar.ch
client-auto-i-dat.mobiliar.ch
kunst.mobiliar.ch
ftp.mobiliar.ch

Certificate

The complete raw certificate details for sos.mobiliar.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSrqbaWGGedV1yuJhBWo
mgwwZxefDBs2I1CjUSY3qFQrWfNV+CPZ6OI6jihvXyxJ3Yxgfd575oK4eB7iyqtX
GvHX/ZQzeRCEkk9el/EKy6xHHfKIoVHUl1iMuofJag6m9Tdu0Bn+uMi00dx93t5v
9PYLTfLDSp98fMpBuoaUmYDRQcqpVLUU8LJs2xmHhAnaX2NW5NZY2/XWIQVUIJPK
3KMBovs3NeFA4ybJH/9/LN65PYpUgM+AhZi+3462u5/rx8+2TpclS8nFr6TZcHFl
KKW3Mlm1sQ3RwVaBnBkDW89LctWCghEG7fMyG4VHW1GjGhNnKe2HnQIjL75SCG8A
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415846391724210607977050632443641827795162511690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 05:49:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-18 05:49:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sos.mobiliar.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22870295736806739429355316017887241240539343857705285720826036331716712998977267767847656277482100410791471302091505494960294758262624696449866534865361810679893593989910988849504085636598266820470815038417017591769960934132597290278101606557562153963409976335971825784550044666430643577451807484715293804563851079596988260077646724863034998313463580288081500645925535365944783289125551312631739295271820656369550464382551410917067313754942482473621107929510335802826790835979516770781069874038759963936389724340822635900755922535750060902911151880698251582456887975158594308383158594557487343320293135631201132806277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sos.mobiliar.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7effa1cfa6389d9f45eef754ca0628e41bdfc0b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0081c73766e3afb5bea1c01db3f40ea7137b0b160604cf23d6211c31c31733a7a922bdaef2e8ed6c111a31bc513b15fa13da5cd6e68a34c080b6ca60cd6b3d3a0f9d880078f4ac3aa8912c6441dbb0cea061cd10827237bbfea1e642dbd82e73afea9d23bad11ff6ecf6f37ec841a59f902cfba4caeefcaef8fb2d07d6b4a7e08f0c1f7a15366776e49c3edaea00cabefcac8542b8bf9dff2b07900077a55b096009b0d9eaf875b2e18635137304a1609963f9aa87b08584c779227caa35e0579daf4ef31eeb1c4424f20052488984d399743897819722eefa5360b573ca82026005379189d10e322aef2c301be1c50cf34b35d5fc2908391f6271acf9bfda9b232fbd05306d53e2592ffbbf2cc95f70a8891d1126be860db46527afb366539dca9a70046ae0f8f281e5ef55217e5e9888c84ae1265ee2e4db03a05c8c9e1e547999466aad9340677fe6e3d4762384f19403aaa7f84f9aa4dcf7f5a8851491e5197538d8637cdf4fadfe6e9e12892d96712f796b26e3339e2450550f764e477d4a3c8217811e7ea6c76aecfc17a26057aee96f4edc7c61c6181826622463dbdff2e9aad73ad1e0e285de89fc28cd7065ee4c3c4ea22027844469c1c6b46ceaf4bb37c522f878c20e1af815d57a06ec248681f9303124206d12138f8a716b5e3899f148e01226453dbaab8381e14574287377f38416572d96673f2258fa068d86ca